Malicious code in figma-ping (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ebe1815dd250b41e64f2909a2e5146f9cd629767dda41d0a8b14058b18463501 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-605 Malicious code in mmqs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d86f79853ff387ce4589a3ee123c6fdf54950b6505232c969c3a0e3ac3a1e1b5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-631 Malicious code in node-hsf (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e30143880959f7bbf83a547cd32a89f7a338b497a3408e3b16ae74d80e6ba4e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-33 Malicious code in @calizahq/react-hooks (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736249350ff22b093bcff8631c4b2722b245bb27b2ef003fdf490a7171dc3c77 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to execute arbitrary code.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code within the context of the current process while analyzi...

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the 3D viewing tool JT and the Teamcenter Visualization lifecycle management system lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information when analyzing a specially...

MAL-2023-481 Malicious code in graphite_remote_adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dd2aa60f9c1fac3dfab372dff47188b2dc4b3f4d2b874b811d20db7a47faca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in doks-child-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402865140408df564c64110cbb63271f62bb71a0fb29453688fa1f876accc457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-270 Malicious code in doks-child-theme (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 402865140408df564c64110cbb63271f62bb71a0fb29453688fa1f876accc457 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-120 Malicious code in babar-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5d799f6658deb9ee8f4827e581daad241c2e6c6a67633932b0247ca17fca4bf0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

msLDAPDump - LDAP Enumeration Tool

msLDAPDump simplifies LDAP enumeration in a domain environment by wrapping the lpap3 library from Python in an easy-to-use interface. Like most of my tools, this one works best on Windows. If using Unix, the tool will not resolve hostnames that are not accessible via eth0 currently. Binding...

MAL-2023-725 Malicious code in react-liveness (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 47194814149429b2ad255dd7af25f5f896c60db91a66c27a1e0ab4ebf077bde1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-982 Malicious code in yaml2stream (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1816a039a50de4469c1bede9e81c8e477e1103ba0fd8e76fda21bfcb8ed8fd10 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-475 Malicious code in github_projects_page (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2d74bcd5a89a954b52e8b0d1326b9a1ffdd05cf108f14b84e984a2e0314abae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ethical Problems in Computer Security

Tadayoshi Kohno, Yasemin Acar, and Wulf Loh wrote excellent paper on ethical thinking within the computer security community: "Ethical Frameworks and Computer Security Trolley Problems: Foundations for Conversation": Abstract: The computer security research community regularly tackles ethical...

MAL-2023-108 Malicious code in assets-table (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0980e797c7e6db1bd06873799b54350dd781176d8a2e104a7301a51053e3991b Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-825 Malicious code in sync-http-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 666c54b1098d52ea02eebf562d8cf02c1a736ee608eb15029543afd5181e4094 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

MAL-2023-107 Malicious code in assets-graph (npm)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e513e7556846ca62fa4d27646eef928d55f2c2954ce9caa51dd63643e2adf445 Lazarus Group targeting blockchain and cryptocurrency companies by exploiting software supply chains through malicious npm packages and social engineering...

Malicious code in @ans-exam/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b89ea0770827099ee6eb05d0c0345dbf2c9318531d99794a8121609dea1d43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-23 Malicious code in @ans-exam/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f1b89ea0770827099ee6eb05d0c0345dbf2c9318531d99794a8121609dea1d43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...